Design/Logic Flaw

2023-04-1221:15:00

PRIOn knowledge base

www.prio-n.com

adobe

acrobat

vulnerability

privilege escalation

temporary file

incorrect permissions

user interaction

0.001 Low

EPSS

Percentile

29.1%

JSON

Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CPENameOperatorVersion
acrobatge20.001.3005
acrobatle20.005.30441
acrobat_dcge15.008.20082
acrobat_dcle23.001.20093
acrobat_readerge20.001.3005
acrobat_readerle20.005.30441
acrobat_reader_dcge15.008.20082
acrobat_reader_dcle23.001.20093

Name	Operator	Version
acrobat	ge	20.001.3005
acrobat	le	20.005.30441
acrobat_dc	ge	15.008.20082
acrobat_dc	le	23.001.20093
acrobat_reader	ge	20.001.3005
acrobat_reader	le	20.005.30441
acrobat_reader_dc	ge	15.008.20082
acrobat_reader_dc	le	23.001.20093

References

helpx.adobe.com/security/products/acrobat/apsb23-24.html

0.001 Low

EPSS

Percentile

29.1%

JSON

Related for PRION:CVE-2023-26396